Why this fit
Teams evaluating AI models, assistants and generative workflows, particularly AI agents that connect over MCP and privacy-sensitive setups โ source available on GitHub.
Search tools, jump to categories, and open key destinations
AI / Catalogue record

Catalogue record
github.com
๐ฆ ๐ ๐ ๐ช ๐ง - Local guardrail proxy for AI coding agents. Wraps any MCP server (stdio or Streamable HTTP) and blocks destructive tool calls โ...
Field notes
๐ฆ ๐ ๐ ๐ช ๐ง - Local guardrail proxy for AI coding agents. Wraps any MCP server (stdio or Streamable HTTP) and blocks destructive tool calls โ DROP TABLE, rm -rf, force-push โ before they execute. MCP supply-chain protection: TOFU tool-catalog pinning against rug pulls, plus tool-description and tool-result scanning for tool poisoning and prompt injection. 51 starter rules, approval gates, audit logging. Single binary, Apache-2.0.
Best for
Teams evaluating AI models, assistants and generative workflows, particularly AI agents that connect over MCP and privacy-sensitive setups โ source available on GitHub.
Known limitations
Workflows that require fully deterministic, auditable outputs with no human review step.
Verify current plan terms with the provider.
Evidence summary
Why this fit
Teams evaluating AI models, assistants and generative workflows, particularly AI agents that connect over MCP and privacy-sensitive setups โ source available on GitHub.
Known limitations
Workflows that require fully deterministic, auditable outputs with no human review step.
Catalogue confidence
Catalogue data checked Oct 27, 2026.
GitHub-backed record with source-attributed context.
Repository context
GitHub / AperionAI/shield
Learn how it works
A short, animated walkthrough of the architecture, features and full README.
Public record assistant
Evidence-bound answers from this catalogue record. No workspace data is used.
Sign in to ask Oryxen AI about this record
The database-first brief above stays free for everyone.
Record provenance
Oryxen distinguishes catalogue metadata from repository context. These signals describe the directory record and its sources; they do not guarantee the current availability, security, or suitability of an external product.
Key links
Keep researching this tool
Community signal
Feedback is public only after moderation. It is distinct from README-derived project context.
Add your signal
Sign in to submit feedback for moderation.
Don't miss โ compare before you commit
Same category ยท honest pricing & fit โ click any card to compare.